Hacker News Reader

Comment by ck2 | Hacker News Reader

What about StartSSL at $60 for two years for wildcard and multiple domains?

https://www.startssl.com/?app=40

  Multiple Domains (UCC) 
  Wild Card Capability

Supported by all modern browsers.

View on HN

It would be nice if they had any sort of flexibility in their identity validation. Not all of us keep identification cards with addresses on them[0] or a telephone number billed in a traditional manner[1].

0 - United States Passport Card, for instance.

1 - VoIP.

If they cannot reach you by phone, they can send you a snail mail with some code printed on it that you have to enter into their admin interface. Admittedly they should tell you about that before you try to register (I discovered it after I already paid, but it just took a few days and all-in-one it wasn't too bad).

>* Supported by all modern browsers.*

Not quite. I've use StartSSL certs for a few things myself, and have found at least one browser that doesn't like them: IE on Windows Mobile 7.*. I've not tried IE10 on Windows Mobile 10 yet to see if they have changed the trust list in Windows Mobile 8.

I've tried to sign up a few times and I've never been able to, either my browsers crashed or timed out forever. I believe they also offer free SSLs

StartSSL uses client side certificates to authenticate you. Last time I checked this only worked in Firefox. Perhaps that is the reason for your crashing.

Client certificates should work in all modern browsers. We use them daily in Chrome, Safari, Mobile Safari, IE and Firefox.

Chrome is reliant on the host OS certificate stack, unfortunately Chrome and client certificates don't seem to work well on OS X for this reason. Safari works, however.

btw it fails on latest chrome and firefox on mac but works great on IE 8/9

I also recommend them. Cumbersome web interface, but the best prices and stills seems secure.

Reply on news.ycombinator.com